📄 port-tags.xtp
字号:
<document><header> <title>port: Port tag configuration</title> <version>Resin 3.1</version> <description> <p>The port tags configure <http> ports, addresses, cluster-portsand custom protocol TCP ports.</p> </description></header><body><localtoc/><s1 title="See Also"><ul><li>See the <a href="index-tags.xtp">index</a> for a list of all the tags.</li><li>See <<a href="cluster-tags.xtp">cluster</a>> tag configuration</li><li>See <<a href="server-tags.xtp">server</a>> tag configuration</li></ul></s1><defun title="<accept-listen-backlog>" version="Resin 3.1"><parents>http, connection-port, protocol</parents><p><accept-listen-backlog> configures operating system TCP listenqueue size for the port.</p></defun><defun title="<accept-thread-max>" version="Resin 3.1"><parents>http, connection-port, protocol</parents><p><accept-thread-min> configures the maximum number of threads listening for new connections on this port.</p></defun><defun title="<accept-thread-min>" version="Resin 3.1"><parents>http, connection-port, protocol</parents><p><accept-thread-min> configures the minimum number of threads listening for new connections on this port.</p></defun><defun title="<address>" version="Resin 3.1"><parents>server</parents><p>The <address> defines the IP interface for a port.A value of '*' binds to all ports. Because the <address> isspecific to a server, it should only be defined in a <server> tag,not a <server-default>.</p><default>*</default><example title="http address"><resin xmlns="http://caucho.com/ns/resin"> <cluster id="web-tier"> <server id="web-a" address="192.168.1.1" port="6800"> <http address="10.0.1.1" port="80"/> </server> <server id="web-b" address="192.168.1.2" port="6800"> <http address="10.0.1.2" port="80"/> </server> ... </cluster></resin></example></defun><defun title="<ca-certificate-file> (OpenSSL)" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><ca-certificate-file> configures the path to a CA certificatefile for intermediate CA support.</p></defun><defun title="<ca-certificate-path> (OpenSSL)" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><ca-certificate-path> configures the path to a CA certificatedirectory for intermediate CA support.</p></defun><defun title="<ca-revocation-file> (OpenSSL)" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><ca-revocation-file> configures the path to a list ofrevoked CA certificates.</p></defun><defun title="<ca-revocation-path> (OpenSSL)" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><ca-revocation-path> configures the path to a list ofrevoked CA certificates.</p></defun><defun title="<certificate-file> (OpenSSL)" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><certificate-file> configures the path to the server'sSSL certificate.</p></defun><defun title="<certificate-chain-file> (OpenSSL)" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><certificate-chain-file> configures the path to the server'sSSL certificate for OpenSSL.</p></defun><defun title="<certificate-key-file> (OpenSSL)" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><certificate-key-file> configures the path to the server'sSSL private key certificate for OpenSSL.</p></defun><defun title="<cipher-suite> (OpenSSL)" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><cipher-suite> configures the path to the server'sSSL cryptographic ciphers.</p></defun><defun title="<cluster-port>" version="Resin 3.0"><parents>server</parents><p><cluster-port> configures the cluster and load balancing socket,for load balancing, distributed sessions, and distributed management.</p><p>When configuring Resin in a load-balanced cluster, each Resin instancewill have its own <srun> configuration, which Resin uses for distributedsession management and for the load balancing itself.</p><p>When configuring multiple JVMs, each <srun> will have aunique <server-id> which allows the -server command-line to selectwhich ports the server should listen to.</p><deftable-childtags><tr><td>address</td> <td>hostname of the interface to listen to</td> <td>*</td></tr><tr><td>jsse-ssl</td> <td>configures the port to use JSSE for SSL</td> <td>none</td></tr><tr><td>openssl</td> <td>configures the port to use OpenSSL</td> <td>none</td></tr><tr><td>port</td> <td>port to listen to</td> <td>required</td></tr><tr><td>socket-timeout</td> <td>timeout waiting to read/write to idle client</td> <td>65s</td></tr><tr><td>accept-listen-backlog</td> <td>The socket factory's listen backlog for receiving sockets</td> <td>100</td></tr><tr><td>tcp-no-delay</td> <td>sets the NO_DELAY socket parameter</td> <td>true</td></tr></deftable-childtags><p>The class that corresponds to <srun> is <a href="javadoc|com.caucho.server.cluster.ClusterPort|"/></p></defun><defun title="<connection-max>" version="Resin 3.1"><parents>server</parents><p><connection-max> configures the maximum number of concurrent connections on this port.</p></defun><defun title="<http>" version="Resin 3.0"><parents>server</parents><p><http> configures a HTTP or HTTPS port listening for HTTP requests.</p><p>When configuring multiple JVMs, each <http> will have aunique <server-id> which allows the -server command-line to selectwhich ports the server should listen to.</p><deftable-childtags><tr><td>address</td> <td>IP address of the interface to listen to</td> <td>*</td></tr><tr><td>port</td> <td>port to listen to</td> <td>required</td></tr><tr><td>tcp-no-delay</td> <td>sets the NO_DELAY socket parameter</td> <td>true</td></tr><tr><td>socket-timeout</td> <td>timeout waiting to write to idle client</td> <td>65s</td></tr><tr><td>accept-listen-backlog</td> <td>The socket factory's listen backlog for receiving sockets</td> <td>100</td></tr><tr><td>virtual-host</td> <td>forces all requests to this <http> to use the named virtual host</td> <td>none</td></tr><tr><td>openssl</td> <td>configures the port to use OpenSSL</td> <td>none</td></tr><tr><td>jsse-ssl</td> <td>configures the port to use JSSE for SSL</td> <td>none</td></tr></deftable-childtags><p>The <var>virtual-host</var> attribute overrides the browser'sHost directive, specifying the explicit host and port for<code>request.getServerName()</code> and <code>getServerPort()</code>.It is not used in most virtual host configurations.Only IP-based virtual hosts which wish to ignore the browser's Hostwill use @virtual-host.</p></defun><defun title="<jsse-ssl>" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><jsse-ssl> configures the port to use JSSE for SSLsupport.</p><p>The <a href="ssl.xtp">SSL</a> section of the Security documentation provides a comprehensive overview of SSL.</p><deftable-childtags><tr> <td>alias</td> <td>Configures the key alias name in the key store file.</td> <td>optional</td></tr><tr> <td>key-store-file</td> <td>Path to the certificate key store file</td> <td>required</td></tr><tr> <td>password</td> <td>Private key password</td> <td>required</td></tr><tr> <td>key-store-type</td> <td>Type of the keystore</td> <td>jks</td></tr><tr> <td>key-manager-factory</td> <td>Special factory for creating keys</td> <td>required</td></tr><tr> <td>ssl-context</td> <td>Special configuration for the ssl context.</td> <td>optional</td></tr><tr> <td>verify-client</td> <td>Settings for client validation</td> <td>required</td></tr></deftable-childtags></defun><defun title="<keepalive-max>" version="Resin 3.1"><parents>http, connection-port, protocol</parents><p><keepalive-max> configures the maximum number of keepalives on this port.</p></defun><defun title="<openssl>" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p><openssl> configures the port to use OpenSSL for SSLsupport (requires Resin Professional). OpenSSL is a fast C implementationof SSL security used by Apache. Resin's configuration is OpenSSLfollows Apache's configuration, so any documentation on installingSSL certificates can use documentation for Apache.</p><p>The <a href="ssl.xtp">SSL</a> section of the Security documentation provides a comprehensive overview of SSL.</p><deftable-childtags><tr> <td>ca-certificate-file</td> <td>Path to a CA certificate file for intermediate CA support</td> <td>optional</td></tr><tr> <td>ca-certificate-path</td> <td>Path to a directory of CA certificates for intermediate CA support</td> <td>optional</td></tr><tr> <td>ca-revocation-file</td> <td>Path to a list of revoked CA certificates</td> <td>optional</td></tr><tr> <td>ca-revocation-path</td> <td>Path to a directory of revoked CA certificates</td> <td>optional</td></tr><tr> <td>certificate-file</td> <td>Path to the server's SSL certificate</td> <td>required</td></tr><tr> <td>certificate-chain-file</td> <td>Path to the certificate chains for client validation.</td> <td>optional</td></tr><tr> <td>certificate-key-file</td> <td>Path to the server's SSL private key certificate</td> <td>required</td></tr><tr> <td>cipher-suite</td> <td>Additions and restrictions to the allowed cryptography ciphers</td> <td>see openssl-tags</td></tr><tr> <td>password</td> <td>Password protecting the public key</td> <td>see openssl-tags</td></tr><tr> <td>protocol</td> <td>Optional restrictions on the SSL protocol</td> <td>see openssl-tags</td></tr><tr> <td>session-cache</td> <td>Boolean enabling caching of SSL sessions for performance</td> <td>false</td></tr><tr> <td>session-cache-timeout</td> <td>Timeout for session cache values</td> <td>30s</td></tr><tr> <td>unclean-shutdown</td> <td>Flag indicating that openssl sockets can be shutdown uncleanly</td> <td>false</td></tr><tr> <td>verify-client</td> <td>Options for client validation</td> <td>none</td></tr><tr> <td>verify-depth</td> <td>Depth of the client certificate chains to validate</td> <td>unlimited</td></tr></deftable-childtags></defun><defun title="<password> (OpenSSL)" version="Resin 3.1"><parents>openssl</parents><p><password> configures the SSL private key certificate password.</p></defun><defun title="<port>" version="Resin 3.1"><parents>http, protocol, server</parents><p>The <port> defines the TCP port the HTTP or protocolshould bind to.</p><example title="http port"><resin xmlns="http://caucho.com/ns/resin"> <cluster id="web-tier"> <server id="web-a" address="192.168.1.1" port="6800"> <http address="10.0.1.1" port="80"/> <http address="192.168.1.1" port="8080"/> </server> ... </cluster></resin></example></defun><defun title="<protocol>" version="Resin 3.1"><parents>server</parents><p><protocol> configures custom socket protocols using Resin's threadand connection management.</p><p>The custom protocol will extend from com.caucho.server.port.Protocol.</p><example><resin xmlns="http://caucho.com/ns/resin"><cluster id="web-tier"> <server id="a"> <protocol address="localhost" port="8888"> <type>example.Magic8BallProtocol</type> </port> </server></cluster></resin></example></defun><defun title="<protocol> (OpenSSL)" version="Resin 3.1"><parents>openssl</parents><p><protocol> configures the SSL allowed protocols.</p></defun><defun title="<session-cache> (OpenSSL)" version="Resin 3.1"><parents>openssl</parents><p><session-cache> configures the SSL session cache.</p></defun><defun title="<session-cache-timeout> (OpenSSL)" version="Resin 3.1"><parents>openssl</parents><p><session-cache> configures the SSL session cache timeout.</p></defun><defun title="<socket-timeout>" version="Resin 3.1"><parents>http, cluster-port, protocol, server</parents><p><socket-timeout> overrides the socket timeout from the<server>.</p></defun><defun title="<tcp-no-delay>" version="Resin 3.1"><parents>http, protocol, cluster-port</parents><p>Sets the tcp-no-delay parameter.</p></defun><defun title="<unclean-shutdown> (OpenSSL)" version="Resin 3.1"><parents>openssl</parents><p><unclean-shutdown> configures the OpenSSL unclean shutdown onconnection close.</p></defun><defun title="<verify-client> (OpenSSL)" version="Resin 3.1"><parents>openssl</parents><p><verify-client> sets the client certificate configuration. If thecertificate is available, it will be put in thejavax.servlet.request.X509Certificate request attribute. </p><deftable><tr> <td>none</td> <td>do not ask for a client certificate (default)</td></tr><tr> <td>required</td> <td>require a client certificate</td></tr><tr> <td>optional</td> <td>ask for a client certificate if availiable </td></tr><tr> <td>optional-no-ca</td> <td>ask for a client certificate, but do not validate the Certificate Authority</td></tr></deftable><example title="Obtaining the client certificate"> X509Certificate []certs = (X509Certificate []) request.getAttribute("javax.servlet.request.X509Certificate");</example></defun><defun title="<verify-depth> (OpenSSL)" version="Resin 3.1"><parents>openssl</parents><p><verify-depth> configures the OpenSSL client verification depth.</p></defun></body></document>⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -